Package org.bouncycastle.jcajce
Class PKIXExtendedParameters
- java.lang.Object
-
- org.bouncycastle.jcajce.PKIXExtendedParameters
-
- All Implemented Interfaces:
Cloneable,CertPathParameters
public class PKIXExtendedParameters extends Object implements CertPathParameters
This class extends the PKIXParameters with a validity model parameter.
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description static classPKIXExtendedParameters.Builder
-
Field Summary
Fields Modifier and Type Field Description static intCHAIN_VALIDITY_MODELThis model uses the following validity model.static intPKIX_VALIDITY_MODELThis is the default PKIX validity model.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description Objectclone()Creates and returns a copy of thisObject.List<PKIXCertStore>getCertificateStores()ListgetCertPathCheckers()List<CertStore>getCertStores()List<PKIXCRLStore>getCRLStores()DategetDate()SetgetInitialPolicies()Map<GeneralName,PKIXCertStore>getNamedCertificateStoreMap()Map<GeneralName,PKIXCRLStore>getNamedCRLStoreMap()StringgetSigProvider()PKIXCertStoreSelectorgetTargetConstraints()Returns the required constraints on the target certificate.SetgetTrustAnchors()intgetValidityModel()booleanisAnyPolicyInhibited()booleanisExplicitPolicyRequired()booleanisPolicyMappingInhibited()booleanisRevocationEnabled()booleanisUseDeltasEnabled()Defaults tofalse.
-
-
-
Field Detail
-
PKIX_VALIDITY_MODEL
public static final int PKIX_VALIDITY_MODEL
This is the default PKIX validity model. Actually there are two variants of this: The PKIX model and the modified PKIX model. The PKIX model verifies that all involved certificates must have been valid at the current time. The modified PKIX model verifies that all involved certificates were valid at the signing time. Both are indirectly choosen with thePKIXParameters.setDate(java.util.Date)method, so this methods sets the Date when all certificates must have been valid.- See Also:
- Constant Field Values
-
CHAIN_VALIDITY_MODEL
public static final int CHAIN_VALIDITY_MODEL
This model uses the following validity model. Each certificate must have been valid at the moment where is was used. That means the end certificate must have been valid at the time the signature was done. The CA certificate which signed the end certificate must have been valid, when the end certificate was signed. The CA (or Root CA) certificate must have been valid, when the CA certificate was signed and so on. So thePKIXParameters.setDate(java.util.Date)method sets the time, when the end certificate must have been valid.It is used e.g. in the German signature law.
- See Also:
- Constant Field Values
-
-
Method Detail
-
getCertificateStores
public List<PKIXCertStore> getCertificateStores()
-
getNamedCertificateStoreMap
public Map<GeneralName,PKIXCertStore> getNamedCertificateStoreMap()
-
getCRLStores
public List<PKIXCRLStore> getCRLStores()
-
getNamedCRLStoreMap
public Map<GeneralName,PKIXCRLStore> getNamedCRLStoreMap()
-
getDate
public Date getDate()
-
isUseDeltasEnabled
public boolean isUseDeltasEnabled()
Defaults tofalse.- Returns:
- Returns if delta CRLs should be used.
-
getValidityModel
public int getValidityModel()
- Returns:
- Returns the validity model.
- See Also:
CHAIN_VALIDITY_MODEL,PKIX_VALIDITY_MODEL
-
clone
public Object clone()
Description copied from class:ObjectCreates and returns a copy of thisObject. The default implementation returns a so-called "shallow" copy: It creates a new instance of the same class and then copies the field values (including object references) from this instance to the new instance. A "deep" copy, in contrast, would also recursively clone nested objects. A subclass that needs to implement this kind of cloning should callsuper.clone()to create the new instance and then create deep copies of the nested, mutable objects.- Specified by:
clonein interfaceCertPathParameters- Overrides:
clonein classObject- Returns:
- a copy of this object.
-
getTargetConstraints
public PKIXCertStoreSelector getTargetConstraints()
Returns the required constraints on the target certificate. The constraints are returned as an instance ofSelector. Ifnull, no constraints are defined.- Returns:
- a
Selectorspecifying the constraints on the target certificate or attribute certificate (ornull) - See Also:
PKIXCertStoreSelector
-
getTrustAnchors
public Set getTrustAnchors()
-
getInitialPolicies
public Set getInitialPolicies()
-
getSigProvider
public String getSigProvider()
-
isExplicitPolicyRequired
public boolean isExplicitPolicyRequired()
-
isAnyPolicyInhibited
public boolean isAnyPolicyInhibited()
-
isPolicyMappingInhibited
public boolean isPolicyMappingInhibited()
-
getCertPathCheckers
public List getCertPathCheckers()
-
isRevocationEnabled
public boolean isRevocationEnabled()
-
-